Method for Detecting a Suppression of a Security-Related Data Transmission from a Vehicle to a Vehicle-External Server, Computer-Readable Medium, System and Vehicle

Abstract

A method for detecting a suppression of a security-related data transmission from a vehicle to a vehicle-external server includes receiving a current data transmission of the vehicle via a first function of the vehicle-external server. The method also includes determining a last, security-related data transmission of the vehicle to a security-related function of the vehicle-external server via the vehicle-external server, and checking the plausibility of the current data transmission to the first function of the vehicle-external server based at least in part on the last, security-related data transmission to the security-related function of the vehicle-external server. The method further includes detecting the suppression of a current, security-related data transmission to the security-related function of the vehicle-external server via the vehicle-external server according to the plausibility check of the current data transmission.

1 .- 10 . (canceled) 
     
     
         11 . A method for detecting a suppression of a security-related data transmission from a vehicle to a vehicle-external server via the vehicle-external server, the method comprising:
 receiving a current data transmission of the vehicle via a first function of the vehicle-external server;   determining a last, security-related data transmission of the vehicle to a security-related function of the vehicle-external server via the vehicle-external server;   checking the plausibility of the current data transmission to the first function of the vehicle-external server based at least in part on the last, security-related data transmission to the security-related function of the vehicle-external server; and   detecting the suppression of a current, security-related data transmission to the security-related function of the vehicle-external server via the vehicle-external server according to the plausibility check of the current data transmission.   
     
     
         12 . The method as claimed in  claim 11 , wherein checking the plausibility of the current data transmission to the first function of the vehicle-external server based at least in part on the last, security-related data transmission to the security-related function of the vehicle-external server comprises:
 determining a relative, temporal dependency between the current data transmission and the last, security-related data transmission; and   if the relative, temporal dependency between the first data transmission and the last, security-related data transmission lies outside a specified time interval, then detecting the suppression of the current, security-related data transmission from the vehicle to the vehicle-external server via the vehicle-external server.   
     
     
         13 . The method as claimed in  claim 11 , wherein the current data transmission comprises one or more data packets from one or more control units of the vehicle. 
     
     
         14 . The method as claimed in  claim 13 , wherein each data packet of the current data transmission is a signed data packet; and
 wherein at least one function of the vehicle-external server checks a signature of a signed data packet of the current data transmission relevant to the at least one function, wherein the at least one function comprises one or more of the group consisting of the first function, the second function and the security-related function of the vehicle-external server; and   if the at least one function determines an error when checking the signature of the signed data packet relevant to the at least one function:   providing an alarm message to a vehicle manufacturer and/or a user of the vehicle.   
     
     
         15 . The method as claimed in  claim 13 , wherein the current data transmission comprises collected data packets of all control units of the vehicle. 
     
     
         16 . The method as claimed in  claim 15 , wherein detecting the suppression of the current, security-related data transmission from the vehicle to the vehicle-external server via the vehicle-external server comprises providing an alarm message to at least one of the group consisting of a vehicle manufacturer and a user of the vehicle. 
     
     
         17 . The method as claimed in  claim 16 , wherein checking the plausibility of the current data transmission to the first function of the vehicle-external server based at least in part on the last, security-related data transmission to the security-related function of the vehicle-external server comprises:
 determining a relative, temporal dependency between the current data transmission and the last, security-related data transmission; and   if the relative, temporal dependency between the first data transmission and the last, security-related data transmission lies outside a specified time interval, then detecting the suppression of the current, security-related data transmission from the vehicle to the vehicle-external server via the vehicle-external server.   
     
     
         18 . The method as claimed in  claim 17 , wherein at least one control unit includes an intrusion detection system. 
     
     
         19 . The method as claimed in  claim 16 , wherein checking the plausibility of the current data transmission to the first function of the vehicle-external server comprises a comparison of a timestamp of the current data transmission to the first function to a timestamp of the last, security-related data transmission. 
     
     
         20 . The method as claimed in  claim 11 , wherein at least one control unit includes an intrusion detection system. 
     
     
         21 . The method as claimed in  claim 11 , the method further comprising:
 receiving the current data transmission via a second function of the vehicle-external server; and   checking the plausibility of the current data transmission to at least one of the first function or the second function of the vehicle-external server with the last, security-related data transmission to the security-related function of the vehicle-external server.   
     
     
         22 . The method as claimed in  claim 11 , the method further comprising:
 receiving the current data transmission via a security-related function of the vehicle-external server; and   storing the current data transmission as the last, security-related data transmission by the vehicle-external server, if the current data transmission comprises one or more data packets for the security-related function of the vehicle-external server.   
     
     
         23 . The method as claimed in  claim 11 , wherein each data packet of the current data transmission is a signed data packet; and
 wherein at least one function of the vehicle-external server checks a signature of a signed data packet of the current data transmission relevant to the at least one function, wherein the at least one function comprises one or more of the group consisting of the first function, the second function and the security-related function of the vehicle-external server; and   if the at least one function determines an error when checking the signature of the signed data packet relevant to the at least one function:   providing an alarm message to at least one of the group consisting of a vehicle manufacturer and a user of the vehicle.   
     
     
         24 . The method as claimed in  claim 11 , wherein detecting the suppression of the current, security-related data transmission from the vehicle to the vehicle-external server via the vehicle-external server comprises providing an alarm message to at least one of the group consisting of a vehicle manufacturer and a user of the vehicle. 
     
     
         25 . The method as claimed in  claim 11 , wherein checking the plausibility of the current data transmission to the first function of the vehicle-external server comprises a comparison of a timestamp of the current data transmission to the first function to a timestamp of the last, security-related data transmission. 
     
     
         26 . A non-transitory computer-readable medium for detecting a suppression of a security-related data transmission from a vehicle to a vehicle-external server via the vehicle-external server, wherein the non-transitory computer-readable medium comprises instructions that, when executed on a computer, execute the method as claimed in  claim 11 . 
     
     
         27 . A system for detecting a suppression of a security-related data transmission from a vehicle to a vehicle-external server via the vehicle-external server, wherein the system is designed to carry out the method as claimed in  claim 11 . 
     
     
         28 . A first vehicle comprising the system for detecting a suppression of a security-related data transmission from a vehicle to a vehicle-external server via the vehicle-external server as claimed in  claim 27 .